Overview

overview

10

Static

static

8c1994c8e4...f4.exe

windows7_x64

10

8c1994c8e4...f4.exe

windows10-2004_x64

1

Analysis

  • max time kernel
    148s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    18-04-2022 16:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8c1994c8e4c5dd8ae2d24e9ea0e25bb1e69dd55ac11b212eb1b6ba5d8ced05f4.exe

  • Size

    32KB

  • MD5

    6665638009612d073e9213c0a261f5b0

  • SHA1

    1c7161d6c0668ca6e2b5e5fab133a58547f68081

  • SHA256

    8c1994c8e4c5dd8ae2d24e9ea0e25bb1e69dd55ac11b212eb1b6ba5d8ced05f4

  • SHA512

    7a344d654622aece80dcff02ac91d44ddf5b665000ba0c55693db2adc022ed10e73fef5bceee9a9947355516e5865ea5b5c6851b907df680dcbc00d2e44aff54

Score
10/10
revengeratnyancatrevengetrojan

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

127.0.0.1:2222

Mutex

91c321acf04

Signatures

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c1994c8e4c5dd8ae2d24e9ea0e25bb1e69dd55ac11b212eb1b6ba5d8ced05f4.exe
    "C:\Users\Admin\AppData\Local\Temp\8c1994c8e4c5dd8ae2d24e9ea0e25bb1e69dd55ac11b212eb1b6ba5d8ced05f4.exe"
    1⤵
      PID:784

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/784-54-0x0000000000C20000-0x0000000000C2E000-memory.dmp
      Filesize

      56KB

      Download
    • memory/784-55-0x000007FEFC061000-0x000007FEFC063000-memory.dmp
      Filesize

      8KB

      Download
    • memory/784-56-0x00000000005A0000-0x00000000005AA000-memory.dmp
      Filesize

      40KB

      Download